CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- astrbotdevs astrbotAstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection5.3 Medium
- astrbotdevs astrbotAstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox5.3 Medium
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setAppCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection9.3 Critical
- deepwisdom metagptFoundationAgents MetaGPT common.py decode_image server-side request forgery5.3 Medium
- lollms, parisneo parisneo/lollms +1 moreCross-site Scripting (XSS) in parisneo/lollms8.2 High
- deepwisdom metagptFoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection6.9 Medium
- deepwisdom metagptFoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery5.3 Medium
- 1panel-dev maxkb1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection5.3 Medium
- 1panel-dev maxkb1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting5.1 Medium
libxml2OSS-FuzzHeap-buffer-overflow in xmlFAParsePosCharGroupNo scorelibjxlOSS-FuzzUse-of-uninitialized-value in DoTestOneInputNo scorebinutilsOSS-FuzzUNKNOWN READ in bfd_getl32No score- 1panel-dev maxkb1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting5.1 Medium
- perfree go-fastdfs-webperfree go-fastdfs-web doInstall InstallController.java improper authorization6.9 Medium
- rukovoditel crmRukovoditel CRM Reflected XSS via zd_echo Parameter in Zadarma Telephony API Endpoint9.3 Critical
- gleam, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreImproper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification8.3 High
- phoca maps, phoca.cz - phoca maps for joomla +1 moreExtension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for Joomla6.5 Medium
- tomdever wpforo forumwpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter7.1 High
- adobe acrobat, acrobat 2024, acrobat and reader +2 more +4 moreAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)8.6 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Course Content Modification4.3 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter5.0 Medium
- boonebgorges buddypress groupblogBuddyPress Groupblog <= 1.9.3 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Group Blog IDOR8.8 High
- wpblockart blockart blocks – gutenberg blocks, page builder blocks ,wordpress block plugin, sections & template libraryBlockArt Blocks <= 2.2.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'clientId' Block Attribute6.4 Medium
- optimole – optimize images in real timeOptimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter7.2 High
- chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzesLifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter6.5 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute6.4 Medium
- optimole – optimize images in real timeOptimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL6.1 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.7 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Private Course Enrollment5.4 Medium
- flatpak xdg-desktop-portalFlatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash...2.9 Low
kmimeOSS-FuzzGlobal-buffer-overflow in nameMatchNo score- keepassxcKeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.3 High
- chargepoint home flex, home flex cph50 firmware +1 moreChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability7.5 High
- chargepoint home flex, home flex cph50 firmware +1 moreChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- chargepoint home flex, home flex cph50 firmware +1 moreChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability7.5 High
- aws-mcp-serveraws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability9.8 Critical
- aws-mcp-serveraws-mcp-server Command Injection Remote Code Execution Vulnerability9.8 Critical
- nomachineNoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- nomachineNoMachine External Control of File Path Local Privilege Escalation Vulnerability7.8 High
- nomachineNoMachine External Control of File Path Arbitrary File Deletion Vulnerability7.1 High
- labcenter proteusLabcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- labcenter proteusLabcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- labcenter proteusLabcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- labcenter proteusLabcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- sonos era 300, era 300 firmware +1 moreSonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability10.0 Critical
- red hat fast datapath for rhel 7, fast datapath for rhel 8, fast datapath for rhel 9 +6 more +8 moreOpenvswitch: open vswitch: denial of service via malformed ftp epasv command5.9 Medium
github.com/daptin/daptinGoDaptin has Unauthenticated Path Traversal and Zip Slip10.0 Critical- Show moreLoading…